The incident bore out years of warnings from the tech and cybersecurity community about the growing capabilities and hypothetical risks artificial intelligence could pose to critical infrastructure.
Amid the warnings, Washington has tried to play catch-up to manage the cybersecurity risks, but concerns were stoked this week by the incident and fluctuating policy.
“What makes this wildly different” for security teams at companies is that it “brings the theoretical scenario of AI being capable of breaching a company and moving faster than a company can detect and respond to attack from theory to reality,” said Adam Ely, general manager of AI security at the cybersecurity firm Check Point Software.
OpenAI revealed Tuesday that two of its models, including its latest GPT-5.6 Sol and an unreleased model, were being evaluated in an internal testing sandbox, but breached past the environment and broke into Hugging Face’s database without any prompt to do so.
The incident caught the attention of even well-versed cybersecurity experts, as it involved autonomous agents and two separate companies.
“Whether it’s sort of an autonomous situation that wasn’t intended to be malicious, or whether it’s attackers controlling a model to do that, that’s different than what most people have experienced,” Ely said.
OpenAI in a blog post called the incident an “unprecedented cyber incident, involving state-of-the-art cyber capabilities.”
The ChatGPT maker said the models were being tested for hacking capabilities in an isolated testing environment with constrained network access and had their normal safety checks off as a result.
While trying to find a solution for a test, the models exploited a previously unknown vulnerability in a third-party software to gain access to the internet.
Read more in a full report at TheHill.com
